Is CVE-2022-40263 actively exploited?

No active exploitation of CVE-2022-40263 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2022-40263 be exploited remotely?

No. CVE-2022-40263 requires local access to exploit.

What is the CVSS score of CVE-2022-40263?

CVE-2022-40263 has a CVSS score of 7.8 (HIGH).

HOME VULNERABILITIESCVE-2022-40263

HIGH

CVE-2022-40263

CWE-798Published: November 4, 2022· Updated: Jun 17, 2026

7.8

CVSS v3.1

Official Description

BD Totalys MultiProcessor, versions 1.70 and earlier, contain hardcoded credentials. If exploited, threat actors may be able to access, modify or delete sensitive information, including electronic protected health information (ePHI), protected health information (PHI) and personally identifiable information (PII). Customers using BD Totalys MultiProcessor version 1.70 with Microsoft Windows 10 have additional operating system hardening configurations which increase the attack complexity required to exploit this vulnerability.

NVD Source

Technical Analysis

CVE-2022-40263 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

A successful exploit results in complete confidentiality breach (data exposure), full integrity compromise (data manipulation), availability disruption (denial of service), with a CVSS base score of 7.8.